State Messaging and Archive Retrieval Toolset (SMART) 



Exhibit 300: Part I : Summary Information and Justification (All Capital Assets) 



I .A. Overview 



1. Date of Submission: 


2/2/2007 


2. Agency: 


Department of State 


3. Bureau: 


Information Resource Management 


4. Name of this Capital Asset: 


State Messaging and Archive Retrieval Toolset (SMART) 


5. Unique Project (Investment) Identifier: (For IT investment only, 
see section 53. For all other, use agency ID system.) 


014-00-01-04-01-1185-00 


6. What kind of investment will this be in FY2008? (Please NOTE: 
Investments moving to O&M ONLY in FY2008, with 
Planning/ Acquisition activities prior to FY2008 should not select 
O&M. These investments should indicate their current status.) 


Full Acquisition 


7. What was the first budget year this investment was submitted to 
OMB? 


FY2003 


8. Provide a brief summary and justification for this investment, including a brief description of how this closes in part or in whole an 
identified agency performance gap: 



SMART vision is to deliver a simple, secure, and user-driven system supporting the conduct of diplomacy through modern messaging, dynamic archiving, and information 
sharing. SMART'S business objective enables direct, secure and controlled communication to 47,000 employees worldwide, to most US government agencies and thus with/to 
foreign governments consistent with the ISE (Information Sharing Environment). All Department of State (DoS) official international inter- and intra-agency business 
communications will be transmitted through SMART. This system transports decisions, messages, and data during world and national emergencies, and is the lifeline for DoS 
employees around the world during times of crisis. SMART is how official international government business gets done. The reliability, availability, performance, and functionality 
requirements of this system demand that overseas posts and the domestic offices remain ever accessible and always online. Technically, the SMART command and control 
system is a roles- based messaging application using complex assessment and distribution algorithms, and comprehensive dissemination profiles to distribute critical information. 
Once message distribution has been determined, the benefits of an email transport mechanism are realized. Thus, the SMART design merges two disparate systems: the 
command and control messaging rules and procedures, and State's email connectivity and infrastructure. The new SMART system preserves all legacy system distribution rules 
and standards and maintains enhanced reliability under threat of unusually hostile intrusion from internal and external sources. It operates in classified and unclassified intranet 
enclaves and the internet environment; archives messages for both operational and life-cycle records management purposes; and replaces the existing "print and file record e- 
mail" policy with electronic capture functionality. The legacy and SMART systems will intemperate, functioning in parallel until the last domestic office and overseas post are 
converted to SMART assuring thousands of employees that they have the information to protect the United States and their own lives during overseas assignments. SMART 
replaces current functionality, and delivers enabling technology through enriched communications via attached documents and embedded objects (e.g. pictures, charts, 
diagrams, etc.) and supplies interagency collaboration tools not available in any legacy messaging application. 



9. Did the Agency's Executive/ 1 nvestment Committee approve this 
request? 


Yes 


a. 1 f "yes," what was the date of this approval? 


3/28/2006 


10. Did the Project Manager review this Exhibit? 


Yes 


12. Has the agency developed and/ or promoted cost effective, energy 
efficient and environmentally sustainable techniques or practices for 
this project. 


Yes 


a. Will this investment include electronic assets (including 


Yes 



1 



b. 1 s this investment for new construction or major retrofit of a 
Federal building or facility? (answer applicable to non-1 T assets only) 


No 


1. If "yes," is an ESPC or UESC being used to help fund this 
investment? 


No 


2. If "yes," will this investment meet sustainable design 
principles? 


No 


3. If "yes," is it designed to be 30% more energy efficient than 
relevant code? 




13. Does this investment support one of the PMA initiatives? 


Yes 


If "yes," check all that apply: 


Expanded E-Government 



13a. Briefly describe how this asset directly supports the identified 
initiative(s)? 



14. Does this investment support a program assessed using the 
Program Assessment Rating Tool (PART)? (For more information 
about the PART, visit www.whitehouse.gov/ omb/ part.) 

a. If "yes," does this investment address a weakness found during 
the PART review? 

b. If "yes," what is the name of the PART program assessed by 
OMB's Program Assessment Rating Tool? 

c. If "yes," what PART rating did it receive? 

15. I s this investment for information technology? 



The SMART initiative support the e-records management portion of the PMA by 
delivering an archiving and records management functionality that initiates the message 
marking function at message creation and leverages the existing State Archiving System 
(SAS). It archives record copies of SMART Working and Archival messages in XML 
format with attachments (both native and PDF/A format), including documents and 
attachments moved up from the unclassified enclave. 

No 



No 



Yes 



If the answer to Question: "Is this investment for information technology?" was "Yes," complete this sub-section. I f the answer is "No," do 
not answer this sub-section. 

For 



16. What is the level of the IT Project? (per CIO Council PM Guidance) Level 2 



17. What project management qualifications does the Project 
Manager have? (per CIO Council PM Guidance): 

18. Is this investment identified as "high risk" on the Q4 - FY 2006 
agency high risk report (per OMB's "high risk" memo)? 

19. I s this a financial management system? 

a. If "yes," does this investment address a FFMIA compliance area? 

1. If "yes," which compliance area: 

2. If "no," what does it address? 



(1) Project manager has been validated as qualified for this investment 



Yes 



No 
No 



required by Circular A-ll section 52 



20. What is the percentage breakout for the total FY2008 funding request for the following? (This should total 100% ) 



Hardware 


10 


Software 


0 


Services 


89 


Other 


1 


21. If this project produces information dissemination products for 
the public, are these products published to the 1 nternet in 
conformance with OMB Memorandum 05-04 and included in your 
agency inventory, schedules and priorities? 


N/A 


23. Are the records produced by this investment appropriately 
scheduled with the National Archives and Records Administration's 
approval? 


No 



I.D. Performance Information 



I n order to successfully address this area of the exhibit 300, performance goals must be provided for the agency and be linked to the annual 
performance plan. The investment must discuss the agency's mission and strategic goals, and performance measures must be provided. 
These goals need to map to the gap in the agency's strategic goals and objectives this investment is designed to fill. They are the internal and 
external performance benefits this investment is expected to deliver to the agency (e.g., improve efficiency by 60 percent, increase citizen 
participation by 300 percent a year to achieve an overall citizen participation rate of 75 percent by FY 2xxx, etc.). The goals must be clearly 
measurable investment outcomes, and if applicable, investment outputs. They do not include the completion date of the module, milestones, 
or investment, or general goals, such as, significant, better, improved that do not have a quantitative or qualitative measure. 

Agencies must use Table 1 below for reporting performance goals and measures for all non-1 T investments and for existing IT investments 
that were initiated prior to FY 2005. The table can be extended to include measures for years beyond FY 2006. 



Performance I nformation Table 1: 



Fiscal 
Year 


Strategic Goal(s) Supported 


Performance Measure 


Actual/ baseline (from 
Previous Year) 


Planned Performance Metric 
(Target) 


Performance Metric Results 
(Actual) 


2005 












2005 












2005 












2005 












2005 
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2005 

|2005 
|2005 
|2006 
2006 
|2006 
|2006 
|2006 
2006 
|2006 
2006 
12007 



All new IT investments initiated for FY 2005 and beyond must use Table 2 and are required to use the Federal Enterprise Architecture (FEA) 
Performance Reference Model (PRM). Please use Table 2 and the PRM to identify the performance information pertaining to this major IT 
investment. Map all Measurement Indicators to the corresponding "Measurement Area" and "Measurement Grouping" identified in the PRM. 
There should be at least one Measurement I ndicator for at least four different Measurement Areas (for each fiscal year). The PRM is available 
at www.egov.gov. 



Performance I nformation Table 2: 



Fiscal 
Year 


Measurement 
Area 


Measurement 1 Measurement 
Category Grouping 


Measurement 
1 ndicator 


Baseline 


Planned 1 mprovement to the 
Baseline 


Actual Results 


2007 


Customer 
Results 


Customer 
Benefit 


Customer 
Satisfaction 


% of customers 
satisfied with SMART 


Statistics on customer 
satisfaction with SMART 
not yet known, as the 
system has not yet been 
deployed 


70% of pilot users agree that 
SMART is an improvement over 
the legacy systems for 
messaging, archiving, and 
retrieval 


N.A. until 1 Nov. 2007. SMART is 
in development following the OMB 
schedule. Per the OMB approved 
useful-segment baseline 
(11/30/2006); SMART will 
develop Useful Segment 1, and 
deploy to Pilot 1 in Sept - Oct 
2007. Results to be reported Nov. 
|l, 2007. 


2007 


Mission and 

Business 

Results 


1 nternational 
Affairs and 
Commerce 


Foreign Affairs 


% of pilot posts 
migrated 


0% of the pilot posts 
have been migrated to 
the SMART system, as the 
system has not yet been 
deployed 


100% of pilot posts will have 
been successfully migrated to 
SMART system Useful Segment 1, 
November, 2007 


N.A. until 1 Nov. 2007. SMART is 
in development following the OMB 
schedule. Per the OMB approved 
useful-segment baseline 
(11/30/2006); SMART will 
develop Useful Segment 1, and 
deploy to Pilot 1 in Sept - Oct 
2007. Results to be reported Nov. 
1, 2007 


2007 


Processes and 
Activities 


Cycle Time and 
Resource Time 


Timeliness 


% of records 
propagated in 15 
minutes or less 


Currently, 0% of records 
are propagated within 15 
minutes. 


With SMART, 100% of records at 
Pilot deployment sites will be 
propagated within 15 minutes. 


1 N.A. until 1 Nov. 2007. SMART is 
in development following the OMB 
schedule. Per the OMB approved 
useful-segment baseline 
(11/30/2006); SMART will 
develop Useful Segment 1, and 
deploy to Pilot 1 in Sept - Oct 
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2007. Results to be reported Nov. 
1, 2007 


2007 


Technology 


Reliability and 
Availability 


Reliability 


Number of failure 
incidences 


Maximum delivery time 
requirements for cables 
already exist, including: 
Routine formal e-Docs- 
3hrs.; Priority e-Docs- 
inr.; critic, bLr and nasn 
e- Docs- 3 minutes 


100% success rate for Pilot site 
adherence to current delivery 
time requirements at pilot posts 


N.A. until 1 Nov. 2007. SMART is 
in development following the OMB 
schedule. Per the OMB approved 
useful-segment baseline 
(11/30/2006); SMART will 
develop Useful Segment 1, and 
deploy to Pilot 1 in Sept - Oct 
2007. Results to be reported Nov. 
1, 2007 


2008 


Customer 


Customer 

Ron of it - 


Customer 

_> d Lib 1 dLLIUI 1 


% of customers 

bdLlbllcU WILM jl v IMr\l 


Statistics on customer 

bd Lib 1 dLUUI 1 WILII jl v IMr\l 

not yet known, as the 
system has not yet been 
deployed. 


70% of all migrated users agree 

LlldL jl v IMr\l lb dll 1 1 1 1 pi U V cl 1 ItM 1 1 

over the legacy systems for 
messaging, archiving, and 
retrieval 




2008 


Customer 
Kesuits 


Service 
Accessibility 


Access 


Number of user 
sessions/visitors per 
month to the broad 
ClassNet archive 
search 


A current average of 
1,807 sessions occur per 
month 


During world-wide deployment, 
the number of user sessions per 
month will climb to 4,000 




2008 


Mission and 

Business 

Results 


Information and 

Technology 

Management 


1 nformation 
Management 


Number of email 
messages archived in 
electronic format 


As of August 2006, no (0) 
email messages are 
archived in electronic 
format 


The baseline represents the count 
for messages w/o organizational 
authority (analogous to existing 
emails subject to "print and file" 
due to record value.) After full 
deployment, 30,000 email 
messages per month will be 
archived in electronic format. 




2008 


Mission and 

Business 

Results 


International Foreign Affairs 

Affairs and 

Commerce 


% of total posts 
migrated to SMART. 


7% of worldwide posts 
have been migrated to 
SMART 


75% of worldwide posts migrated 
to SMART. 




2008 


Processes and 
Activities 


Management and 
1 nnovation 


Knowledge 
Management 


Percent of pilot users 
leveraging newly 
created profiles. 


0% (none) of pilot users 
leveraging newly created 
profiles. 


25% of pilot users leveraging 
newly created profiles 




2008 


Technology 


Information and 
Data 


Internal Data 
Sharing 


Annual number of 

ciclli ui 1 1 I I Cjjtiycj 

available for 
unrestricted search 
on ClassNet 


Currently, there are 

annrnyinnafplu ffl ODD 

messages available for 
unrestricted search on 
ClassNet. 


250,000 electronic messages will 

hp i la hip fnr i inrpQtrirtprl 

1 J _ OVOIICIUIC IUI UI II CjM illcu 

search on ClassNet 





I .E. Security and Privacy 



I n order to successfully address this area of the business case, each question below must be answered at the system/ application level, not at 
a program or agency level. Systems supporting this investment on the planning and operational systems security tables should match the 
systems on the privacy table below. Systems on the Operational Security Table must be included on your agency Fl SMA system inventory and 
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should be easily referenced in the inventory (i.e., should use the same name or identifier). 

All systems supporting and/ or part of this investment should be included in the tables below, inclusive of both agency owned systems and 
contractor systems. For IT investments under development, security and privacy planning must proceed in parallel with the development of 
the system/ s to ensure IT security and privacy requirements and costs are identified and incorporated into the overall lifecycle of the 
system/ s. 

Please respond to the questions below and verify the system owner took the following actions: 

1. Have the IT security costs for the system(s) been identified and integrated into the overall costs of the investment: Yes 
a. If "yes," provide the "Percentage IT Security" for the budget year: 9 

2. Is identifying and assessing security and privacy risks a part of the overall risk management effort for each system supporting or Yes 
part of this investment. 



3. Systems in Planning - Security Table: 



Name of System 


Agency/ or Contractor Operated System? 


Planned Operational Date 


Planned or Actual C&A Completion Date 


SMART (State Messaging and Archive Retrieval Toolset) 


Contractor and Government 


|4/l/2007 


|3/l/2007 







4. Operational Systems - Security Table: 






Name of 
System 


Agency/ or Contractor Nl ST Fl PS 199 
Operated System? Risk 1 mpact level 


Has C&A been Completed, Date C&A What standards were used for 
using Nl ST 800-37? Complete the Security Controls tests? 


Date Complete(d): 
Security Control Testing 


Date the contingency 
plan tested 



5. Have any weaknesses related to any of the systems part of or supporting this investment been identified by the agency or IG? No 
a. If "yes," have those weaknesses been incorporated agency's plan of action and milestone process? No 

6. I ndicate whether an increase in IT security funding is requested to remediate IT security weaknesses? No 

a. I f "yes," specify the amount, provide a general description of the weakness, and explain how the funding request will remediate the 
weakness. 



7. How are contractor security procedures monitored, verified, validated by the agency for the contractor systems above? 

The system will reside within Government controlled facilities and maintained by both FTEs and contractors. Diplomatic Security maintains strict policies and procedures 
regarding security requirements for both employees and contractors. All DoS security requirements are included in the contract scope of work. All contract staff, both system 
developers as well as system users, have received and will continue to receive appropriate training. Before being granted access to OpenNet/ClassNet, all contractors receive a 
security briefing equivalent to that received by FTE employees. Only individuals who meet the requirements for sensitive positions outlined in the Federal Personnel Manual may 
be members of the systems staff or users with special access privileges, such as operator privileges. The guidance that is followed is in 12 FAM 629. The information systems 
security officer (ISSO) ensures that a limited background investigation (LBI) is performed for all uncleared vendor maintenance personnel by the Office of Investigations and 
Counterintelligence (DS/ICI/PSS). The LBI must consist of a review of a completed security questionnaire, a name check against applicable government, police, credit, and 
fingerprint records, and include a personal interview. The system manager allows users only limited system access until advised in writing by the RSO or PSO that an appropriate 
background investigation has been completed. 



8. Planning & Operational Systems - Privacy Table: 


r 


Name of System 


1 s this a new 
system? 


1 s there a Privacy 1 mpact 
Assessment (PI A) that covers this 
system? 


1 s the PI A available to the public? 


1 s a System of Records Notice 
(SORN) required for this 
system? 


Was a new or amended SORN 
published in FY 06? 
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SMART (State Messaging and 
Archive Retrieval Toolset) 


Yes 


Yes. 


No, because a PIA is not yet 
required to be completed at this 
time. 


No 


No, because the system is not 
a Privacy Act system of 
records. 



I .F. Enterprise Architecture (EA) 

I n order to successfully address this area of the business case and capital asset plan you must ensure the investment is included in the 
agency's EA and Capital Planning and I nvestment Control (CPI C) process, and is mapped to and supports the FEA. You must also ensure the 
business case demonstrates the relationship between the investment and the business, performance, data, services, application, and 
technology layers of the agency's EA. 

1. I s this investment included in your agency's target enterprise architecture? Yes 
a. If "no," please explain why? 



2. I s this investment included in the agency's EA Transition Strategy? 

a. If "yes," provide the investment name as identified in the Transition Strategy provided in the agency's most recent annual EA 
Assessment. 

b. If "no," please explain why? 



Yes 

SMART 



3. Service Reference Model (SRM) Table: 

Identify the service components funded by this major IT investment (e.g., knowledge management, content management, customer relationship 
management, etc.). Provide this information in the format of the following table. For detailed guidance regarding components, please refer to 

http:/ / www.whitehouse.gov/ omb/ egov/ . 




Agency 
Component Name 


Agency Component Description 


Service 
Domain 


FEA SRM 
Service Type 


FEA SRM 
Component 


FEA Service 
Component 
Reused 
Name 


FEA Service 
Component 
Reused UPI 


1 nternal 

or 
External 
Reuse? 


BY Funding 
Percentage 


Data Classification 


Defines the set of capabilities that allow the 
classification of data. 


Back Office 
Services 


Data 

Management 


Data 

Classification 






No Reuse 


1 


Data Exchange 


Defines the set of capabilities that support the 
interchange of information between multiple 
systems or applications; includes verfication 
that transmitted data was received unaltered. 


Back Office 
Services 


Data 

Management 


Data Exchange 






No Reuse 


1 


Data Mart (New DoS 
Service) 


Defines the set of capabilities that support a 
subset of a data warehouse for a single 
department or function within an organization. 


Back Office 
Services 


Data 

Management 


Data Mart 






No Reuse 


1 


Data Recovery 


Defines the set of capabilities that support the 
restoration and stabilization of data sets to a 
consistent, desired state. 


Back Office 
Services 


Data 

Management 


Data Recovery 






No Reuse 


1 


Data Warehouse 


Defines the set of capabilities that support the 


Back Office 


Data 


Data Warehouse 






No Reuse 


1 
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larchiving and storage of large volumes of data. 


Services 


Management 












Extraction and 
Transformation 


Defines the set of capabilities that support the 
manipulation and change of data. 


Back Office 
Services 


Data 

Management 


Extraction and 
Transformation 






No Reuse 


1 


Loading and 
Archiving 


Defines the set of capabilities that support the 
population of a data source with external data. 


Back Office 
Services 


Data 

Management 


Loading and 
Archiving 






No Reuse 


1 


Meta Data 
Management 


Defines the set of capabilities that support the 
maintenance and administration of data that 
describes data. 


Back Office 
Services 


Data 

Management 


Meta Data 
Management 






No Reuse 


1 


Enterprise 
Application 
Integration 


Defines the set of capabilities that support the 
redesigning of disparate information systems 
into one system that uses a common set of 
data structures and rules. 


Back Office 
Services 

1 


Development 
and Integration 


Enterprise 
Application 
1 ntegration 






No Reuse 


1 


Instrumentation and 
Testing 


Defines the set of capabilities that support the 
validation of application or system capabilities 
and requirements. 


Back Office 
Services 


Development 
and Integration 


1 nstrumentation 
and Testing 






No Reuse 


1 


Legacy 1 ntegration 


Defines the set of capabilities that support the 
communication between newer generation 
hardware/software applications and the 
previous, major generation of 
hardware/software applications. 


Back Office 
Services 


Development 
and Integration 


Legacy 
1 ntegration 






No Reuse 


1 


Software 
Development 


Defines the set of capabilities that support the 
creation of both graphical and process 
application or system software. 


Back Office 
Services 


Development 
and Integration 


Software 
Development 






No Reuse 


2 


Ad Hoc 


Defines the set of capabilities that support the 
use of dynamic reports on an as needed basis. 


Business 

Analytical 

Services 


Reporting 


Ad Hoc 






No Reuse 


1 


Standardized / 
Canned 


1 

Defines the set of capabilities that support the 
use of pre- conceived or pre- written reports. 


Business 

Analytical 

Services 


Reporting 


Standardized / 
Canned 






No Reuse 


1 


Graphing / Charting 


befines the set of capabilities that support the 
presentation of information in the form of 
diagrams and tables. 


Business 

Analytical 

Services 


Visualization 


Graphing / 
Charting 






No Reuse 


1 


Multimedia 


Defines the set of capabilities that support the 
representation of information in more than one 
form to include text, audio, graphics, animated 
graphics and full motion video. 


Business 

Analytical 

Services 


Visualization 


Multimedia 






No Reuse 


1 


Network 

Management (New 
DoS Service) 


Defines the set of capabilities that monitor and 
maintain a communications network in order to 
diagnose problems, gather statistics and 
provide general usage. 


Business 

Management 

Services 


Organizational 
Management 


Network 
Management 






No Reuse 


1 


Workgroup / 
Groupware (New 
DoS Service) 


Defines the set of capabilities that support 
multiple users working on related tasks. 


Business 

Management 

Services 


Organizational 
Management 


Workgroup / 
Groupware 






No Reuse 


2 


Online Help 


Defines the set of capabilities that provide an 
electronic interface to customer assistance. 


Customer 
Services 


Customer 
1 nitiated 
Assistance 


Online Help 






No Reuse 


1 


Online Tutorials 


Defines the set of capabilities that provide an 
electronic interface to educate and assist 
customers. 


Customer 
Services 


Customer 
1 nitiated 
Assistance 


Online Tutorials 






No Reuse 


1 
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Alerts and 
Notifications 


Defines the set of capabilities that allow a 
customer to be contacted in relation to a 
subscription or service of interest. 


Customer 
Services 


Customer 
Preferences 


Alerts and 
Notifications 






No Reuse 


1 


Profile Management 


Defines the set of capabilities that change a 
user interface and how data is displayed. 


Customer 
Services 


Customer 
Preferences 


Personalization 






No Reuse 


2 


Subscriptions 


Defines the set of capabilities that allow a 
customer to join a forum, listserv, or mailing 
list. 


Customer 

jtri VILC3 


Customer 

Prof Dron roc 
n tri tri tri ilcj 


Subscriptions 






No Reuse 


1 


Tagging and 
Aggregation 


Defines the set of capabilities that support the 
identification of specific content within a larger 
set of content for collection and summarization. 


Digital Asset 
Services 


Content 
Management 


Tagging and 
Aggregation 






No Reuse 


1 


















Classification 


Defines the set of capabilities that support the 
categorization of documents. 


Digital Asset 
Services 


Document 
Management 


Classification 






No Reuse 


1 


Document 
Conversion 


Defines the set of capabilities that support the 
changing of files from one type of format to 
another. 


Digital Asset 
Services 


Document 
Management 


Document 
Conversion 






No Reuse 


1 


Document 
Referencing 


Defines the set of capabilities that support the 
redirection to other documents and information 
for related content. 


Digital Asset 
Services 


Document 
Management 


Document 
Referencing 






No Reuse 


1 


Document Review 
and Approval (New 
DoS Service) 


Defines the set of capabilities that support the 
editing and commendation of documents before 
releasing them. 


Digital Asset 
Services 


1 

Document 
Management 


Document Review 
and Approval 






No Reuse 


1 


Document Revisions 


Defines the set of capabilities that support the 
versioning and editing of content and 
documents. 


Digital Asset 
Services 


Document 
Management 


Document 
Revisions 






No Reuse 


1 


1 ndexing (New DoS 
Service) 


Defines the set of capabilities that support the 
rapid retrieval of documents through a 
structured numbering construct. 


Digital Asset 
Services 


Document 
Management 


1 ndexing 






No Reuse 


1 


Library and Storage 
(New DoS Service) 


Defines the set of capabilities that support 
document and data warehousing and archiving. 


Digital Asset 
Services 


Document 
Management 


Library / Storage 






No Reuse 


1 


Categorization 


Defines the set of capabilities that allow 
classification of data and information into 
specific layers or types to support an 
organization. 


Digital Asset 
Services 


Knowledge 
Management 


Categorization 






No Reuse 


1 


1 nformation 
Mapping / 
Taxonomy 


Defines the set of capabilities that support the 
creation and maintenance of relationships 
between data entities, naming standards and 
categorization. 


Digital Asset 
Services 


Knowledge 
Management 


1 nformation 
Mapping / 
Taxonomy 






No Reuse 


1 


1 nformation 
Retrieval 


Defines the set of capabilities that allow access 
to data and information for use by an 
organization and its stakeholders. 




Digital Asset 
Services 


Knowledge 
Management 




1 nformation 
Retrieval 






No Reuse 


1 


Information Sharing 
(New DoS Service) 


Defines the set of capabilities that support the 
use of documents and data in a multi-user 
environment for use by an organization and its 
stakeholders. 


Digital Asset 
Services 


Knowledge 
Management 


1 nformation 
Sharing 






No Reuse 


1 




Smart Documents 
(New DoS Service) 


ucTines tne set ot capaoiniies mat support tne 
interaction of information and process (business 
logic) rules between users of the document, 
(i.e. the logic and use of the document is 


Digital Asset 
Services 


Knowledge 
Management 


Smart Documents 




1 

No Reuse 


1 
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embedded within the document itself and is 
managed within the document parameters) 
















_ . Defines the set of capabilities that support the 
Document . . . * . t . tf t u ... 
_. .,. . . categorization of documents and artifacts, both 
Classification . . ■ . . , 
electronic and physical. 


Digital Asset 
Services 


Records 
Management 


Document 
Classification 






No Reuse 


1 


Defines the set of capabilities that support the 
Document termination or cancellation of documents and 
Retirement artifacts used by an organization and its 

stakeholders. 


Digital Asset 
Services 


Records 
Management 


Document 
Retirement 






No Reuse 


1 


Record Linking / 
Association 


Place holder language 


Digital Asset 
Services 


Records 
Management 


Record Linking / 
Association 






No Reuse 


1 


Inbound L r . . , ...... . 

_ . Defines the set of capabilities that manage 

orrespon ence externally initiated communication between an 
Management (New l. , .. . . . , , 

_ * . organization and its stakeholders. 
DoS Service) 


Process 

Automation 

Services 


Routing and 
Scheduling 


1 nbound 

Correspondence 

Management 






No Reuse 


1 


Outbound Defines the set of capabilities that manage 
Correspondance . . .. . ... . . v ... . . a 

M ... internally initiated communication between an 
Management (New ... . .. . , . ,. 

_ _ ~ . organization and its stakeholders. 
DoS Service) a 


Process 

Automation 

Services 


Routing and 
Scheduling 


Outbound 

Correspondence 

Management 






No Reuse 


1 


_ ,4.. Defines the set of capabilities that support the 
Conflict Resolution . . , . r. ,.„ MM ... . 
... _ _ _ . cpnclusion of contention or differences within 
(New DoS Service) .r , . 

the business cycle. 


Process 

Automation 

Services 


Tracking and 
Workflow 


Conflict 
Resolution 






No Reuse 


1 


Process Tracking 
(New DoS Service) 


Defines the set of capabilities that allow the 
monitoring of activities within the business 
cycle. 


Process 

Automation 

Services 


Tracking and 
Workflow 


Process Tracking 






No Reuse 


1 


Defines the set of capabilities that support the 
Document Library grouping and archiving of files and records on a 
server. 


Support 
Services 


Collaboration 


Document Library 






No Reuse 


1 


Defines the set of capabilities that allow an 

, _ , , entire team as well as individuals to view, add 
Shared Calendaring . .., . , . , . 

a and modify each other s schedules, meetings 

and activities. 


Support 
Services 


Collaboration 


Shared 
Calendaring 






No Reuse 


1 


Defines the set of capabilities that support a 
Task Management specific undertaking or function assigned to an 
employee. 


Support 
Services 


Collaboration 


Task 

Management 






No Reuse 


1 


Threaded Defines the set of capabilities that support the 

running log of remarks and opinions about a 
Discussions . . .. ^ 
given topic or subject. 


Support 
Services 


Collaboration 


Threaded 
Discussions 






No Reuse 


1 


Community Defines the set of capabilities that support the 
Management (New administration of online groups that share 
DoS Service) common interests. 


Support 
Services 


Communication 


Community 
Management 






No Reuse 


1 


Data Integration 


Defines the set of capabilities that support the 
organization of data from separate data sources 
into a single source using middleware or 
application integration as well as the 
modification of system data models to capture 
new information within a single system. 


Support 
Services 


Communication 


NEW 






No Reuse 


1 


Command and The set of capabilities that support the secure 
Control Messaging electronic issuance of congruent data and 


Support 
Services 


Communication 


NEW 






No Reuse 


15 
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and Email Services action officers views of commands and 
(New DoS Service) messages and supporting data concerning 

objectives (using email, Instant Messaging, & 
collaboration tools); timely status reporting; 
and situation and context collaboration 
achieving a common view of events and data 
between/among all command posts with 
automated archiving, requesting, and 
dissemination. 
















Defines the set of capabilities that support 
Classification selection and retrieval of records organized by 
shared characteristics in content or context. 


Support 
Services 


Search 


Classification 






No Reuse 


1 


Defines the set of capabilities that support 
Pattern Matching retrieval of records generated from a data 
(New DoS Service) source by imputing characteristics based on 

patterns in the content or context. 


Support 
Services 


Search 


Pattern Matching 






1 

No Reuse 


1 


befines the set of capabilities that support 
Query retrieval of records that satisfy specific query 
selection criteria. 


Support 
Services 


Search 


Query 






No Reuse 


1 


Defines the set of capabilities that support the 
Role Based Access management of permissions for logging onto a 
Control (New DoS computer, application, service, or network; 
Service) includes user management and role/privilege 

management. 


Support 
Services 


Security 
Management 


Access Control 






No Reuse 


2 


_ „ Defines the set of capabilities that support the 
System Resource , . . .. .. r . _r , 

./ .. ... balance and allocation of memory, usage, disk 

Monitoring (New . , 1 ' a j . 
„ . , space and performance on computers and their 
DoS Service) ,. t . M M 
applications. 


Support 
Services 


Systems 
Management 


Issue Tracking 






No Reuse 


1 


Defines the set of capabilities that support the 

Rpmntp ^vQtpmQ mnnitnrinn aHminiQtr^Hnn anH iiQ^np nf 
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Control (New DoS applications and enterprise systems from 
Service) locations outside of the immediate system 
environment. 


Support 
Services 


Systems 
Management 


Remote Systems 
Control 






No Reuse 


1 



Use existing SRM Components or identify as "NEW". A "NEW" component is one not already identified as a service component in the FEA 
SRM. 

A reused component is one being funded by another investment, but being used by this investment. Rather than answer yes or no, identify 
the reused service component funded by the other investment and identify the other investment using the Unique Project I dentifier (UPI ) 
code from the OMB Ex 300 or Ex 53 submission. 

'I nternal' reuse is within an agency. For example, one agency within a department is reusing a service component provided by another 
agency within the same department. 'External' reuse is one agency within a department reusing a service component provided by another 
agency in another department. A good example of this is an E-Gov initiative service being reused by multiple organizations across the federal 
government. 

Please provide the percentage of the BY requested funding amount used for each service component listed in the table. If external, provide 
the funding level transferred to another agency to pay for the service. 
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4. Technical Reference Model (TRM) Table: 



To demonstrate how this major IT investment aligns with the FEA Technical Reference Model (TRM), please list the Service Areas, Categories, Standards, and 

Service S pecifica tions supportin g this IT investment. 



FEA SRM Component 


FEA TRM Service Area 


FEA TRM Service 
Category 


FEA TRM Service Standard 


Service Specification (i.e. vendor or 
product name) 


Data Exchange 


Component Framework 


Data 1 nterchange 


Data Exchange 


XML, BizTalk 


System Resource Monitoring 


Component Framework 


Data Management 


Reporting and Analysis 


Microsoft Operations Matter (MOM) 


Process Tracking 


Component Framework 


Data Management 


Reporting and Analysis 


SQL 2005 Reporting Services 


Personalization 


Component Framework 


Presentation / Interface 


Dynamic Server-Side Display 


SharePoint 2007 


Document Referencing 


Component Framework 


Presentation / Interface 


Dynamic Server-Side Display 


SharePoint 2007 and SQL Server 


Graphing / Charting 


Component Framework 


Presentation / Interface 


Static Display 


Outlook, VSTO, HTML 


Multimedia 


Component Framework 


Presentation / 1 nterface 


Static Display 


Outlook, VSTO, HTML 


Data Mart 


Component Framework 


Security 


Supporting Security Services 


SQL 2005 


[information Retrieval 


|Service Access and Delivery 


Access Channels 


Web Browser 


|lnternet Explorer 6.0 or greater 


Remote Systems Control 


Service Access and Delivery 


Access Channels 


Web Browser 


Internet Explorer, Citrex Metaframe 


Query 


Service Access and Delivery 


Access Channels 


Web Browser 


Microsoft Internet Explorer 


Online Tutorials 


Service Access and Delivery 


Delivery Channels 


Intranet 


1 nteractive DVDs 


Alerts and Notifications 


Service Access and Delivery 


Delivery Channels 


Intranet 


|LCS 2005 


Online Help 


Service Access and Delivery 


Delivery Channels 


Intranet 


SharePoint 2007 


Subscriptions 


Service Access and Delivery 


Delivery Channels 


Intranet 


SQL 2005 Notification Services and Exchange 
Server 


Workgroup / Groupware 


Service Access and Delivery 


Delivery Channels 


Peer to Peer (P2P) 


Groove 


Information Sharing 


Service Access and Delivery 


Delivery Channels 


Peer to Peer (P2P) 


|Groove 


Threaded Discussions 


Service Access and Delivery 


Delivery Channels 


Peer to Peer (P2P) 


Groove 


Shared Calendaring 


Service Access and Delivery 


Delivery Channels 


Peer to Peer (P2P) 


|Groove 


Task Management 


Service Access and Delivery 


Delivery Channels 


Peer to Peer (P2P) 


Groove 


Access Control 


(service Access and Delivery 


Service Requirements 


Authentication / Single Sign-on 


Active Directory, SQL Server 


Network Management 


Service Access and Delivery 


Service Transport 


Supporting Network Services 


MS Operations Manager (MOM) 


Inbound Correspondence 
Management 


IService Interface and 
1 ntegration 


1 ntegration 


Middleware 


BizTalk 2006 


Outbound Correspondence 
Management 


Service Interface and 
1 ntegration 


1 ntegration 


Middleware 


BizTalk 2006 


Classification 


Service Interface and 
1 ntegration 


1 ntegration 


Middleware 


BizTalk 2006 


Loading and Archiving 


Service Interface and 
1 ntegration 


1 ntegration 


Middleware 


BizTalk 2006 


Data Integration 


Service Interface and 
1 ntegration 


1 ntegration 


Middleware 


BizTalk 2006, XML 


Legacy 1 ntegration 


Service Interface and 
1 ntegration 


1 ntegration 


Middleware 


MFI, BizTalk, XML 


Enterprise Application Integration 


IService Interface and 
1 ntegration 


1 ntegration 


Middleware 


MFI, XML 
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Document Retirement 


Service Interface and 
1 nteg ration 


1 nteroperability 


Data Format / Classification 


SQL 2005 


Document Classification 


Service Interface and 
1 nteg ration 


Interoperability 


Data Format / Classification 


VSTO, BizTalk 


Data Classification 


Service Interface and 
1 nteg ration 


Interoperability 


Data Format / Classification 


VSTO, XML 


Categorization 


Service Interface and 
1 nteg ration 


Interoperability 


Data Format / Classification 


XML 


Document Conversion 


Service Interface and 
1 nteg ration 


1 nteroperability 


Data Transformation 


Adobe Professional; XML; BizTalk 2006 


Extraction and Transformation 


Service Interface and 
1 nteg ration 


1 nteroperability 


Data Transformation 


SharePomt 2007 


Document Revisions 


Service Interface and 
1 nteg ration 


Interoperability 


Data Transformation 


SharePoint 2007 and SQL 2005 


Loading and Archiving 


Service Interface and 
1 nteg ration 


1 nteroperability 


Data Transformation 


XML 


Tagging and Aggregation 


Service Interface and 
1 nteg ration 


Interoperability 


Data Types / Validation 


BizTalk 2006 










Conflict Resolution 


Service Interface and 
1 nteg ration 


Interoperability 


Data Types / Validation 


Visual Studio Tools for Office (VSTO) 


Document Review and Approval 


Service Interface and 
1 nteg ration 


Interoperability 


Data Types / Validation 


VSTO 


Classification 


Service Interface and 
1 nteg ration 


Interoperability 


Data Types / Validation 


VSTO 


Smart Documents 


Service Interface and 
Integration 


1 nteroperability 


Data Types / Validation 


W Kill f— /~\ | /"\ f\ I— 

XML, SQL 2005 










Data Integration 


Service Platform and 
1 nfrastructure 


Database / Storage 


Database 


MS SQL 


Document Library 


Service Platform and 
1 nfrastructure 


Database / Storage 


Database 


SAN 


Ad Hoc 


Service Platform and 
1 nfrastructure 


Database / Storage 


Database 


SQL 


Library / Storage 


Service Platform and 
Infrastructure 


Database / Storage 


Database 


SQL 2005 


Data Mart 


Service Platform and 
1 nfrastructure 


Database / Storage 


Database 


SQL 2005 


Data Warehouse 


Service Platform and 
1 nfrastructure 


Database / Storage 


Database 


SQL 2005 


Meta Data Management 


Service Platform and 
1 nfrastructure 


Database / Storage 


Database 


SQL 2005 


1 ndexing 


Service Platform and 
1 nfrastructure 




Database / Storage 


Database 


SQL 2005; Autonomy K2 


Standardized / Canned 


Service Platform and 
1 nfrastructure 


Database / Storage 


Database 


SQL Reporting Services 


Information Mapping / Taxonomy 


Service Platform and 
1 nfrastructure 


Database / Storage 


1 

Database 


SQL Server 
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Record Linking / Association 


Service Platform and 
1 nfrastructure 


Database / Storage 


Database 


SQL Server 


Data Warehouse 


Service Platform and 
1 nfrastructure 


Database / Storage 


Storage 


SAN 


Data Recovery 


Service Platform and 
1 nfrastructure 


Database / Storage 


Storage 


SAN 


Document Library 


Service Platform and 
1 nfrastructure 


Database / Storage 


Storage 


SQL 2005, SharePoint 2007 


Library / Storage 


Service Platform and 
1 nfrastructure 


Database / Storage 


Storage 


Storage Network Area (SAN) 


Query 


Service Platform and 
1 nfrastructure 


Delivery Servers 


Application Servers 


Autonomy K2, SQL 2005 


Classification 


Service Platform and 
1 nfrastructure 


Delivery Servers 


Application Servers 


Autonomy K2, SQL 2005 


Pattern Matching 


Service Platform and 
1 nfrastructure 


Delivery Servers 


Application Servers 


Autonomy K2, SQL 2005 


Information Mapping / Taxonomy 


Service Platform and 
1 nfrastructure 


Delivery Servers 


Application Servers 


BizTalk 2006 


Shared Calendaring 


Service Platform and 
1 nfrastructure 


Delivery Servers 


Application Servers 


Exchange Server 


Task Management 


Service Platform and 
1 nfrastructure 


Delivery Servers 


Application Servers 


Exchange Server 


Personalization 


Service Platform and 
1 nfrastructure 


Delivery Servers 


Portal Servers 


SharePoint 2007 


Online Help 


Service Platform and 
1 nfrastructure 


Delivery Servers 


Portal Servers 


SharePoint 2007 


Enterprise Application Integration 


Service Platform and 
1 nfrastructure 


Delivery Servers 


Portal Servers 


SharePoint 2007 


Threaded Discussions 


Service Platform and 
1 nfrastructure 


Delivery Servers 


Portal Servers 


SharePoint 2007 


Community Management 


Service Platform and 
1 nfrastructure 


Delivery Servers 


Portal Servers 


SharePoint 2007 


Document Referencing 


Service Platform and 
1 nfrastructure 


Delivery Servers 


Portal Servers 


SharePoint 2007 and SQL Server 


Information Retrieval 


Service Platform and 
1 nfrastructure 


Delivery Servers 


Portal Servers 


SharePoint 2007, Autonomy K2 


Information Sharing 


Service Platform and 
1 nfrastructure 


Delivery Servers 


Portal Servers 


SharePoint 2007, Autonomy K2 


Software Development 


Service Platform and 
1 nfrastructure 


Software Engineering 


Integrated Development 
Environment 


VSTO 


Instrumentation and Testing 


Service Platform and 
1 nfrastructure 


Software Engineering 


Test Management 


VSTO 



Service Components identified in the previous question should be entered in this column. Please enter multiple rows for FEA SRM 
Components supported by multiple TRM Service Specifications 

I n the Service Specification field, Agencies should provide information on the specified technical standard or vendor product mapped to the 



FEA TRM Service Standard, including model or version numbers, as appropriate. 



5. Will the application leverage existing components and/ or Yes 
applications across the Government (i.e., FirstGov, Pay.Gov, etc)? 

a. If "yes," please describe. 

Components of the SMART Program, specifically NCD and Groove, will rely on SI PRNET for classified interagency collaboration. SMART will support PKI and Smart Card 
technology, where required, to strengthen authentication and credentialing. We have also developed a Memorandum of Understanding between the National Archives and 
Records Administration and the Department of State regarding the E-Records Management E-Government Initiative, Issue Area 4: Transfer of Permanent Electronic Records to 
support the development and implementation of electronic records management in the context of each agency's E-Government roles and responsibilities, including their roles and 
responsibilities regarding the Electronic Records Management (ERM) Initiative, which is one of the 24 E-Government initiatives supporting the President's Management Agenda. 

6. Does this investment provide the public with access to a No 
government automated information system? 

a. If "yes," does customer access require specific software (e.g., a 
specific web browser version)? 

1. If "yes," provide the specific product name(s) and version 
number(s) of the required software and the date when the public will 
be able to access this investment by any software (i.e. to ensure 
equitable and timely access of government information and services). 



Exhibit 300: Part 1 1 : Planning, Acquisition and Performance Information 



1 1 .A. Alternatives Analysis 



Part II should be completed only for investments identified as "Planning" or "Full Acquisition," or "Mixed Life-Cycle" investments in response 
to Question 6 in Part I, Section A above. 

I n selecting the best capital asset, you should identify and consider at least three viable alternatives, in addition to the current baseline, i.e., 
the status quo. Use OMB Circular A- 94 for all investments, and the dinger Cohen Act of 1996 for IT investments, to determine the criteria 
you should use in your Benefit/ Cost Analysis. 

1. Did you conduct an alternatives analysis for this project? Yes 

a. I f "yes," provide the date the analysis was completed? 3/1/2002 

b. If "no," what is the anticipated date this analysis will be completed? 

c. If no analysis is planned, please briefly explain why: 



2. Alternative Analysis Results: 
Use the results of your alternatives analysis to complete the following table: 
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Send 

to 
OMB 


Analyzed 


Ucbcnpiion or miici naiivc 


KlbK HUJUblcU IMbK MUJUbtcU 

Lifecycle Costs Lifecycle 
estimate Benefits 
estimate 


True 


Defense 

Messaging System 
(DMS) 


Implementation of Department of Defense's client-server messaging system. Results: Large distributed 
hardware and software investment, with little room for savings in personnel or other O&M resources. 


0.466 


0 


True 


Northrop 
Grumman 
Messaging System 


Use of a web paradigm to incrementally provide future functionality solutions using commercially available 
technologies. Results: Centralized system with large acquisition resources, but with low personnel 
requirements through its system life cycle. 


0.390 


0 


True 


SMART Messaging 
System 


Leverage the existing modern technical Microsoft Exchange infrastructure within the Department and apply 
widely- proven, market dominant technologies that the Department currently uses and is experienced with. 
Results: Centrally managed system that leverages and enhances the existing email and archiving 
infrastructure. Meets full business requirements. 


0.301 


° 


True 


Status Quo 


Ths alternative is to maintain the current legacy system hardware and software. This alternative is very risky 

fnr t~hp Dpnarfmpnt nf ^t^tp and m/prc.pac. pmnlm/ppQ hpraiiQP t~hp Qwtpm iiqpc. a bmp niimhpr nf nIH 
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components that can no loger be purchase or replaced. The design and components are not compliant with the 
FEA, and do not meet the minimum acceptable requirements for a modern, secure, and reliable messaging 
and command and control system. 


0.277 


0 



3. Which alternative was selected by the Agency's Executive/ I nvestment Committee and why was it chosen? 

The Department's approach to SMART continues to be driven by finding the best value solution that meets the Dept's requirements. Alternative 3 - The SMART messaging system 
- uniquely provides all functionality with the lowest risk and at the most reasonable cost considering its value. Because it is the only alternative that met all of the government 
requirements and it is in alignment with the PMA, alternative 3 was determined to be in the overall best interest of the government. An overview of the supporting analysis 
follows. The life cycle cost comparison is summarized in current year dollars using OMB Circular A-94, Appendix C 10-year real discount rate of 2.8% and is for the time period 
between FY06-FY14. Costs for running the legacy systems during development and implementation are included for all alternatives. These costs include O&M and refresh 
hardware and deployment costs. The DMS alternative involves implementing the off-the-shelf DOD messaging system at all worldwide sites and posts. The system does not meet 
all Dept requirements. Additionally, it requires 726 distributed messaging servers. The complex distributed nature of the system results in no O&M cost savings. During system 
testing, the Northrop Grumman Messaging System failed to meet Dept requirements and performance specifications. When comparing these alternatives, they were scored using 

the same scale described earlier: Alternatives Assessment Scores -- Lower score is better: Alternative Meets Vision.... Meets Timeline.. ..Risk.. ..Cost.. ..Overall Score NG 

System 3 2 3 2 10 DMS 2 3 2 3 10 

SMART 1 1 1 1 4 Based on our analysis and significant practical experience with these alternatives, the SMART solution is 

clearly the lowest risk and most cost effective alternative. It satisfies the overriding objective of the SMART program: the immediate need to replace the current World War 1 1 
vintage messaging system. The Under Secretary for Management made the replacement of the legacy system a critical priority. The SMART solution is the only alternative that 
can meet the Under Secretary's deadline and fulfill all requirements for an integrated messaging and archive retrieval system necessary to support today's electronic 
communications needs. 

4. What specific qualitative benefits will be realized? 

The main benefit of SMART is to improve the quality of communications used to conduct foreign affairs. SMART is replacing a sixty-year-old messaging infrastructure that can no 
longer meet the requirements placed upon it. A modern system enriches communications by enabling the user to add attachments and embedded objects to messages and by 
taking advantage of peer-to- peer file sharing, instant messaging, and web- based collaborative tools. Providing the diplomatic community with a rich collaborative messaging 
environment will increase both the quality and the assurance of the delivery of State Department communications. With the SMART alternative, these functions are provided by a 
single, market-dominant manufacturer using globally-proven, integrated technologies. SMART is expected to improve the quality of reporting, ultimately leading to better 
decision making. For instance, due to the text-based systems currently in place, an economics officer cannot include charts, graphs, equations, or other graphics to represent his 
or her findings in a report to decision makers. SMART will allow the officer to provide these richer sources of information to the decision makers more quickly. These types of 
qualitative returns will continue to be explored as the operational concept evolves. An additional benefit of replacing legacy systems that rely on equipment made by 
manufacturers no longer in business or that are no longer supported by the manufacturer is that the operational risk to the Department is greatly reduced. The SMART 
alternative leverages previous investments in delivering a modern SMART infrastructure utilizing current hardware and software components. Finally, by consolidating and 
centralizing the operations and hardware of multiple messaging systems through SMART, overall growth in operations and support costs of the messaging core will be 
constrained and controlled. 
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1 1 .B. Risk Management 



You should have performed a risk assessment during the early planning and initial concept phase of this investment's life-cycle, developed a 
risk-adjusted life-cycle cost estimate and a plan to eliminate, mitigate or manage risk, and be actively managing risk throughout the 
investment's life-cycle. 

1. Does the investment have a Risk Management Plan? Yes 

a. I f "yes," what is the date of the plan? 11/21/2006 

b. Has the Risk Management Plan been significantly changed since Yes 
last year's submission to OMB? 

c. If "yes," describe any significant changes: 

The SMART Risk Management Plan has been completely re-written to reflect the new useful segments approach to the SMART solution. Version: PS. SMART RISK MANAGEMENT 
PLAN. 002 Updated: 11/21/2006 is included in the SMART resource library and attached to this submission. The processes and tools for identifying and capturing the risk 
information has the SMART PM, DPM, and division management heavily involved in collecting, assessing, and managing SMART risks. The program utilizes the SharePoint SMART 
Risk Capture Tool: The Risk Capture Tool is a form built in the SharePoint SMART workspace that enables those involved in the planning process to input risks directly into a 
database. Data collected in the form is used for analysis and management purposes. The PMO leverage the expert judgment and experience of DoS, contractor professionals, 
stakeholders and various oversight bodies to identify and manage risks. The outputs of the identification process are List of Risks; Risk Categories ensuring functional group 
awareness of risks; and descriptions with accurate descriptions of the risk. The PMO performs basic qualitative risk analysis to assess the probability and impact of risk events to 
determine which risks may have the most impact on SMART. The SMART budget does not have a separate "set aside" for management reserve or contingencies. It is assumed 
that the risks not accounted for in the budget can be absorbed by the program. Per this plan, risks that can not be absorbed by the program are given the most severe impact 
ratings and receive the greatest management scrutiny. In the event such a risk is actually identified, the management team may have to exercise significant creativity in 
implementing the contingency plan for the risk. Options include, seeking a "loan" or a "grant" from the Department or our partner organizations, receiving physical support from 
our partner organizations, or adding additional temporary personnel from the receiving O&M organizations (either contractor resources that may or may not be reimbursed by 
SMART at a later date or Government employees). When analyzing the risk, the specific contingency plan strategy will be used to determine whether the cost is contained in or 
will be absorbed by the existing SMART budget. Further details describing the extencive Risk management process are provide in the new SMART Risk Management plan. 

2. If there currently is no plan, will a plan be developed? 

a. If "yes," what is the planned completion date? 

b. If "no," what is the strategy for managing the risks? 



3. Briefly describe how investment risks are reflected in the life cycle cost estimate and investment schedule: 

The SMART Risk Management process identifies the impact of the risks on the Program schedule and budget. The Program reorganization and project planning activities to-date 
have focused on reducing or eliminating the risks relating to change management, network infrastructure, and data integrity and security. Users typically resist change unless 
the benefits are clearly and immediately recognized. Nearly 500 business users have been involved in the early stages of the SMART design and testing. A proactive process of 
focus groups and iterative testing by representative samples of the State population will continue to be reflected in the schedule throughout the design and development process. 
Just-in-time computer based training will be offered as SMART is piloted and implemented, with user feedback carefully monitored to ensure that SMART is an asset to the 
Department's 46,000 prospective SMART users. The change management activities have been captured in the SMART cost estimate. With increasing demands on the 
Department's network by a variety of applications in addition to SMART, bandwidth limitations and latency could fail to satisfy system availability expectations and adversely 
impact the user experience. The Enterprise Network Management office (ENM) remains an active participant in SMART design, development, and implementation and will 
continue its build-out of the Department's infrastructure. The architecture of SMART will be carefully designed to reduce the burden on the network and significant investments to 
enhance the performance of the network are included in the program budget. The design risk for a complex global messaging system operating with command and control 
priority is that documents will be subject to security vulnerabilities, sensitivity compromises, or loss of classified or Privacy Act data. One of the hallmarks of the SMART program 
is security, represented by a Security Working Group and the professional judgment of Diplomatic Security (DS) and the Office of Information Assurance (IRM/IA). All SMART 
applications will be subject to the Department's internal processes to ensure adequate protection before implementation and dynamic auditing through the lifecycle of SMART. 
Information Assurance activities are built into the schedule from day one and funded by the program. 
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